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An updated description of the HP3000 mode of the Vision architecture 
has now been released, through the efforts of Terry Jackson. 
For questions or comments, please refer to Terry. 

The following issues have been resolved, clarified or addressed 
since the previous Vision CPU architecture memo. 



1. Mode switch 

Ue have identified several ways to shave time from' the mode switch 
operations between Vision mode and HP3000 mode. This is clearly 
important for the performance of HPE. 

a) switch marker 

Switching modes is not a truly asynchronous event like 
an external interrupts This allows us to get by with 
saving only a subset of the register values, under software 
control, This means that fewer pushes and pops are 
required to do the mode switch. In order to accomplish 
this we need to distinguish between a switch marker and 
a full blown interrupt marker. Ue also need to give IEXIT 
the means to distinguish between the two markers. 



Basically, a switch marker will be an external procedure 
marker with STATUSB added; an interrupt marker is then a 
switch marker with X0-X15 and B0-B5 added. 
An additional bit in the TCB, called RSUIP (return-switch 
in progress) will keep the IEXIT logic straight. 
Updated ACD pages are provided. 

b) switch entry point 

A dedicated object in group zero (see under 11) will 
provide the entry point for the switch software in 
native mode. The switch operation is no longer regarded 
as a trap. It will have no parameters. 
This will save, some execution time at the expense of 
some replicated code. 



2. Nil cbject specifications 

The Nil' object is further defined (relative to the ACD version 5) 
to guarantee that all implementations cause consistent traps to 
occur when attempting to access memory through the nil pointer. 
The full statement is that operating system software shall set 
the OD of object zero in group zero to values that correspond to 
an object type of data, access rights R3U3, a lower bound of 1 
and an upper bound of 0. ; Thf virtual object number of the nil 
object shall also be fixed aft zejb. 



3. SIT trap 

The SIT trap (DBSIT) will report the pointer to the next 
instruction as its parameter rather than the previous instruction 
address. The obvious hardware implementation for SIT uses similar 
logic as for external.' interrupts and it is unnecessarily expensive 
for hardware to hang on to the previous instruction counter. 
Ue don't expect this to create any difficulty for software. 



4 Access rights checking 

Both VCF60 and VCF5G teams have requested reconsideration of 
certain aspects of the access rights checking rules. 

a) write access to imply read access 

Hardware simplifications accrue (and redesign can be 
avoided) if write access to a data object always implies 
'read access. The access right fields in an Object 
Descriptor keep their original meaning; we plan to merely 
add a statement that operating system software shall 
• not create, objects that have write access without also 
granting them: read access. 



b) read access to the current code object 

The ACD makes a distinction between read access to the 
current code object and read access to the same object 
when it does not happen to be the current code object. 
It does this by stating that read access to the current 
code object is always granted regardless of the contents 
of the Object Descriptor for the. code object. , 

, Currently, this cah be implemented on the VCF60 and the 
1 VCF50. only by doing eHtra work in CALLX and EXIT, which 
will slow these important instructions down. 
Ue therefore feel that very strong reasons are needed 
to retain this exceptional treatment of the current code 
object in the Vision architecture. If you feel you have 
such strong reasons, we would like to hear them by Feb 15. 
On the HP3000, P- relative addressing of data is a basic 
addressing mode and the only one available to offer 
protection to third-party software. On Vision, no 
performance benefits derive from keeping data in your 
code segment rather than in some data segment, and third- 
party software can be protected by separate privilege 
level and by exploiting the group structure. 



5. Interruptible instructions 

Questions have been raised regarding the expected behavior when 
an interruptible instruction is resumed and finds that its data 
on the stack has been corrupted. In particular, what should 
happen when the IIP bit is set but the word popped from the stack 
(which represents how many times around the loop have already 
been performed) is found to be negative? 

The expected behavior in this and similar cases is allowed to be 
implementation dependent, as long as the "damage" does not extend 
to another task. For example, it is acceptable to immediately 
continue to the next instruction when this happens; it is not 
acceptable to hang in an infinite microcode loop. 



6. "Overlap" 

The notion of overlap between source and destination of an 
instruction needs some revision to get around, some nasty 
microcode implications. An instruction such as 

M0VE8 source, destination \ 

is only guaranteed to obtain the expected result when the 
destination does not "overlap" the source. This is to allow 
hardware to do the move in either one 64-bit gulp or two 32-bit 
gulp or (probably in case of misaligments) in some number of odd- 
sized gulps, and yet be able to recover from a page fault in 
the middle of the move. The exclusion of overlap makes it 
permissible to restart the instruction even if the destination 
had been partially modified. 



For this to really work, we need to extend the notion of overlap 

to cover the case exemplified by M0VE8 [B5+X6], X6. 

If M0VE8 encounters a page fault at [B5+X6+1], the value of X6 

may already have been modified to the value at [B5+X6] . 

To avoid this, the definition of "overlap" must incorporate the 

components of an address calculation for the source operands. 



7. Code object size 

A Vision mode code object is limited in size to 2~24 bytes. 
This is not currently stated explicitly in the ACD but could be 
assumed from the format of the external procedure marker. 
Ue now make this assumption explicit. 



8. DST and CST descriptors 

Ue will extend the M0VEfSP8 instruction to allow software to 
get access to the current values of the CST and DST descriptors. 



9, Bounds checking on variable length instructions 

Some instructions such as MOVEC and CMPC involve a sequence of 
byte operations over a length given in the instruction. 
The way bounds checking is performed optimally in such an 
instruction depends on the organization of the hardware. On the 
VCF60, bounds checking is performed in parallel with an actual 
access. On the VCF50, bounds checking is done explicitly in 
microcode As a consequence, on the VCF60 it is fastest to start up 
the loop of MOVEC or CMPC and trap out when the end of the object 
is reached before the loop counter is exhausted. In contrast, on 
the VCF50 it is fastest to check whether both first and last byte 
are within bounds and not do any bounds checking for intermediate 
bytes once the loop starts. 

The issue then arises when and how a bounds violation must be 
reported and how much of the instruction should be presumed to 
have been completed when this occurs. 

Ue have decided that hardware should be left free to choose the 
sequence that is optimal for it. The definition for MOVEC will 
now state that if MOVEC cannot be completed due to a bounds violation, 
the effect of MOVEC is that a contiguous but unspecified number of 
bytes has been moved, all within the object's bounds. 
A similar modification will serve for CMPC. 



10. Page fault trap 

The parameters for the page fault trap are currently listed as 
including an 8-byte Virtual Page Number (left justified) and 
a 4-byte .Page Offset (right justified). 
Ue have collapsed these now to a single 8-byte Virtual Address. 



11. Architecturally fixed object numbers 

Ue have received a request from HPE-I to dedicate certain objects 
in group zero for certain uses and to fix these objects 
architecturally. In the version 5 ACD, four objects are fixed by 
their logical address (the NIL object, trap code object, channel 
interrupt code object and processor interrupt code object) and 
four are fixed by their virtual address (SYSCOM area, hash table, 
page directory and PME) . Ue have been asked to extend this list 
and also to move the logical object numbers for trap code object, 
etc. downward so that SYSCOM area, etc. can be given a logical 
object number that is the same as its virtual object number. 

Ue believe that the only object numbers (logical or virtual) that 
need to be fixed architecturally are those that must be known to 
both software and microcode. Any other object numbers can be fixed 
by software convention, not architectural mandate. 
Ue are willing to move the logical object numbers for trap code 
object, etc. downward in order to make it possible for HPE-I to 
implement the scheme they proposed as a software convention. 
The revised numbering is shown below. More object numbers will 
be fixed only after it has been demonstrated that both software 
and hardware (microcode) are affected. 



logical address 



NIL object 

trap object 

channel interrupt object 

processor interrupt object 

switch handler (nm) object 



12. Decimal instructions 



group 0, object 

group 0, object 10 

group 0, object 11 

group 0, object 12 

group 0, object 13 



Ue have decided to allow conversions from 64-bit integers to 

both 8-byte decimal and 16-byte decimal and vice versa. 

All these instructions will be moved to the CONVERT escape 

group . 

Ue have also decided to combine the ZEXT3 and TRUNC3 instructions 

of the previous status memo into a single M0VE3 instruction. 

Ue will include a fuller description of these later. 

An updated opcode chart, though still tentative, is included. 



13. IEEE floating point 

The Proposed Standard for floating point arithmetic has come 
one important step closer to becoming the Standard for floating 
point arithmetic. 

In the latest round of balloting some small amendments were passed. 
Ue will include a description of this later. In the mean time, 
please consult Bill Ames. 



14. 



"MEMSAC" instructions 



Ue have decided in principle to adopt the memory diagnostic 

capabilities proposed by Jim Uichelman and Jim Chiochios. 

Ue are in the process of refining all the encodings to assist 

the hardware in implementing these. 

The latest iteration is reflected in a memo by Brian Button 

dated Feb 1. 



15. STATUSCand STATUSD 

The current definition of STATUSC and STATUSD is based on the 
difference in behavior of changes in status in a shared-memory 
multiprocessor system. Items in STATUSC, when changed, do not 
affect any other processor in the system; whereas changes to 
STATUSD must be propagated to all other processors in the shared- 
memory multiprocessor system. 

Ue are currently investigating whether the responsibility for 
notifying other processors can be relegated to system software; 
this would make the multiprocessor implementation potentially 
simpler, faster and more reliable. 

Until this investigation is complete, we will hold off on other 
changes to STATUSC and STATUSD that have been proposed, such as 
removing the mode bit from STATUSC. 

It is quite possible that the eventual result will be to move all 
items of STATUSC and STATUSD into the SYSCOM area. 



16. PROBE and BPROBE. 



PROBE is intended for use by system intrinsics to allow them to 

test whether the caller has passed a legal address (range) to the 

intrinsic. 

Jim Miller has made a proposal, with Alan Hewer, for a change 

in the definition of PROBE and for a new variant (BPROBE) of 

PROBE that takes the address to be probed from a base register 

rather than from memory. The change in PROBE closes a protection 

hole having to do with the fact that the value of S in the 

environment of the procedure doing the PROBE is larger than the 

value of S that applied in the environment of the caller. 

The variant BPROBE would help make passing address parameters 

in base registers more effective. 

Updated ACD pages for these two instructions are provided. 

Note that the encodings for "ring" have been changed as well. 



17. CHECKA and CHECKB. 

Currently, the definition of CHECKA, B includes a special way 
of treating the operand of the instruction. If the bit CBA 
or CBB is not set, the specification prohibits trapping on 
an illegal operand. This was done so that implementations 
could implement CHECKA, B without having to do an operand fetch; 
this could speed up the (frequent) case where CBA, CBB is clear 
at the expense of the case where the bit is set. 
However, it turns out that in many situations the operand fetch 
does not slow down execution and the special prohibition on 
operand traps incurs a cost simply because it involves a special 
case. 

In retrospect, it is therefore clear that CHECKA and CHECKB were 
overspecified. A better statement is that CHECKA and CHECKB are 
not required to trap an operand violation if CBA, CBB are clear. 



18. Ring level for code running on the ICS 

Ue are looking into the possibility of relegating more code that 

must run on the ICS to ring level 1 rather than level 0. 

This would allow better granularity on protection in system code. 

It would also allow the trap object to run at level 1. 

Changes to I EXIT would be required to allow it to exit into code 

that runs at a higher level. 

Ue hope to have a proposal by next month. 



ERRATA 

- all references to "time of day" should be replaced with 
of century" 



'time 



M0VEtSP4: setting CBA and CBB does not require special privilege. 
Privilege level 3 is sufficient. 

M0VEfSP4: CBA and CBB do not warrant their own selector. 
Accessing CBA and CBB must now be done using MOVEfSP STATUSB1. 

The breakrange trap does not return the operand responsible for 
tripping the breakrange. It is up to software to determine what 
values changed within the breakrange. It is precisely because it 
is not very feasible for hardware to keep track of the operand 
responsible that the VISION architecture has a breakrange for write 
but not for read and not for execute. 

section 7.1.2 still mentions SI. This is an unintended carry-over 
from the version 3 ACD. Because of the redefinition of the 
dispatcher marker, in version 5 QI and SI are one and the same. 
Hence any reference to SI should be deleted. 

TCBX is no longer architecturally defined. In version 5 the TCB 
is accessible to software, so a MOVEf/tSP is no longer needed 
to manipulate a TCBX pointer. The TCB-extension is a software 
concept only. 

clarification: M0VEtSP4 task clock enable has no effect when 
executed on the ICS. 



corrections and clarifications prove necessary in the definitions 
of CALLX, EXIT and PDDEL. Updated ACD pages are provided. 
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6.1 


4 Opcod 


e Assignments 










6.2.6.2 CALL target. r4 


















Procedure call. A procedure marker is pushed onto the stack 


The 


followin 


g chart 


shows the 


association of opcodes with the 




and control is passed to "target", interpreted as 


instruction 


name (mnemonic). 


The 8-bit encoding of the opcode 




a 32-bit half-word offset relative to the start of 


is found by adding the hexadecimal number in the row of the 




the CALL instruction. CALL requires the procedure 


instruction 


to the hexadecimal number 


in its column. 






to be within the current code object. 


OPCODE 














IIP := 1-IIP; if IIP=1 and PTE=1 then Trap"DBCALL"; 




+ !00 


+ !01 


+ !02 


+ !03 


+!04 +!05 


+ !06 


+ !07 


IIP := 0; 


!00 


ERROR 


NOP 


EXIT 


SEXIT 


TESTA TESTB 


TESTOV 


oRB-fl^"**^^ 


S := S + 4; {pushes garbage} 


-WS" 


* 


* 


* 


* 


PSEB PSDB 


DISP 


TRY 


PUSH4 P[32..63]; 


!10 


DISABLE 


ENABLE 


INTERRUPT UNTRY 


EXTEND DELETE 


CHECKA 


CHECKB 


PUSH4 Q[32..63]; 


!18 TESTSTRIP* 


* 


* 


* BRX 


* 


* 


Q := S; 


!20 


# 


* 


QUAD4 


* 


P0P8 * 


* 


P0P16 


P := P + target * 2; 


!28 


PUSH1 


PUSH2 


PUSH8 


* 


TESTDOUN UP 


DOUN 


PUSH16 




• !30 


P0P1 


P0P2 


* 


* 


* TESTREF 


* 


TEST16D 


Traps: STK0VF 


138 


* 


TEST2 


TEST8 


TEST4F 


TEST4D TEST8D 


TEST8F 


TEST16F 


CODEBNDSV 


140 


AND4 


# 


# 


MPY4F 


MPY8 * 


MPY8F 


MPY16F 


DBCALL 


!48 


N0T4 


* 


DIV4 


DIV4F 


DIV8 * 


DIV8F 


DIV16F 




!50 


0R4 


REM4 


NEG4 


NEG4F 


NEG8 REM8 


NEG8F 


NEG16F 




!58 


X0R4 


M0D4 


ABS4 


ABS4F 


ABS8 M0D8 


ABS8F 


ABS16F 


6.2.6.3 CALLX loi.r4 


!60 


CMP1 


CMP2 


CMP4 


CMP4F 


CMP8 BCMP8 


CMP8F 


CMP16F 




!68 


M0VE1 


M0VE2 


M0VE4 


* 


M0VE8 BSET8 


* 


M0VE16 


External call. A procedure marker is pushed onto the stack and 


!70 


TESTBIT 


ISC42 


ADD4 


ADD4F 


ADD8 BGET4 


ADD8F 


ADD16F 


control is passed to the entry point specified in the 


!78 


* 


MPY4 


SUB4 


SUB4F 


SUB8 BSET4 


SUB8F 


SUB16F 


OD for "loi". "Loi" contains the high 32 bits of a 


!80 


MOVEADR 


BMOVEADR* 


* 


* * 


# 


* 


logical address into the target object. 


!88 


* 


* 


M0VEfSP4 


M0VEfSP8 TESTSEMASL4D 


SL8D 


SL16D 




!90 


* 


* 


M0VEtSP4 


MOVEtSPS 


M0VESEMASR4D 


SR8D 


SR16D 




!98 


CHECKLO 


CHECKHI 


DUP 


OVPUNCH 


M0VE3 CMP4D 


CMP8D 


CMP16D 


IIP := 1-IIP; if IIP=1 and PTE=1 then Trap" DBCALL"; 


!A0 


LSL4 


ASL4 


BCMP4 


GETSIGN 


ZEXT2 ADD4D 


ADD8D 


ADD16D 


IIP := 0; 


!A8 


LSR4 


ASR4 


BADD4 


VALN 


* SUB4D 


SUB8D 


SUB16D 


PUSH8 Pre turn; 


!B0 


LSL8 


ASL8 


BSUB4 


VALD 


* MPY4D 


MPY8D 


MPY16D 


(S-4)[0..2] := STATUSA[0..2]; 


!B8 


LSR8 


ASR8 


* 


# 


¥ DIV4D 


DIV8D 


DIV16D 


PUSH4 Q[32..63]; 


!C0 


PROBE 


BPROBE 


MOVEBIT 


MOVEC 


* * 


MOVEBLR 


CMPB 


Q := S; 


!C8 


DPF 


* 


REP 


CMPC 


* TRANSL 


MOVEBRL 


CMPT 


if loi non-existent-object then Trap"C0DE0DTV"; 


!D0 


P0LY4F 


P0LY8F 


P0LY16F 


SCANUNTIL* * 


* 


* 


if OD(loi).TYP <> VisionCode then Trap"CODETYPV" ; 


1D8 


# 


* 


* 


* 


* VECTOR 


SYS 


CONVERT 


if STATUSA.XL > 0D(loi).PR then Trap"CODERINGV" ; 


@!E0 


BRG 


BRGE 


BRGL 


BRNU 


PUSH4 PUSHADR 


P0P4 


BP0P8 


STATUSA.XL : = 0D(loi).XL; 


@!E8 


BRGU 


BRNL 


BRNE 


BR 


TESTLSB TEST1 


TEST4 


BTEST8 


Ptarget[ 0..31] := loi; 


(3>!F0 


BRN 


BRE 


BRL 


BRLE 


CALL CALLX 


* 


BREAK 


Ptarget[32..63] := 0D(loi).EPU0 * 4; 


!F8 


BRU 


BREU 


BRLU 


BRNG 


* * 


* 


ERROR 


P := Ptarget; 


Note 1: the 


rows marked with 


"@" contain the instructions that 


Traps: STKOVF 




car 


be packed two per word. 








C0DE0DTV 


















CODETYPV 


Note 2: the 


instructions VECTOR ,SYS 


and CONVERT are 


escapes 


to 


CODEBNDSV 




a secondary 


set of opcodes. 








CODERNGV 


















DBCALL 








6 
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6.2.6.5 EXIT 

Exit from procedure. This instruction can be used to return 
from a procedure called with CALL or CALLX. The 
procedure marker located at Q contains the necessary 
information to restore the context of the caller. 
If the caller executed in a different code object 
than the current one, a number of checks are made. 



if (Q-8) [0] = 1 then begin 

{external exit} 

Pobject := (Q-12) [0. .31] ; 

Poffset := (Q-8) [8.. 31], zero-extended; 

STjeturn := (Q-8)[0..7J; 

if STATUS. XL > ST return.XL then Trap"CODERINGV"; 

if Pobject non-existent then Trap"C0DE0DTV"; 

if 0D(Pobject).TYPE <> VisionCode then Trap"C0DETYPV"; 

if ST_return.XL > STATUSB.XTL then Trap"INSXTL"; 

end 
else begin 

{internal exit} 

Pobject := P[0..31]; 

Poffset := (Q-8) [0.. 31]; 

STjreturn := STATUSA; 

end; 
Q_offset := (Q-4)[0..31]; 

if Q_offset < or Q_offset > Q[32..63] - 12 
then Trap"STKC0NSISTV"; 

if Poffset [31] = 1 and {implementation choice} 
then Trap"INS0DDP"; 
Poffset[31] 
S[32..63] 
Q[32..63] 
P[0..31] 
P[32..63] 
STATUSA 



12; 



= 0; 

= Q[32..63] 

= Q_offset; 

= Pobject; 

= Poffset; 

= STjreturn; {SIT and DBP bits not to take 



effect until next instruction} 



Status: 
Traps: 



restored from marker on external exit 

INSXTL 

C0DE0DTV 

C0DERINGV 

C0DETYPV 

STKCONSISTV 

C0DEBNDSV 

INS0DDP 
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6.2.4.9 SCANUNTIL limit. r4, charset.mr, string. mr, index. rui4 

Scan string until condition satisfied. The string of characters 
(bytes) pointed to by "string" is scanned for a character 
that satisfies a particular condition. Scanning starts 
at the byte index "index" into the string and will not 
go beyond "limit". SCANUNTIL sets "index" to the value 
of the first byte scanned that satisfies the condition 
if such a byte exists; it leaves "index" at the value of 
"limit", otherwise. The condition to be satisfied by the 
character is encoded as a 256-bit bit array (similar to a 
Pascal set) . Bits found set in the bit array "charset" 
signify that the corresponding character satisfies the 
condition. 

If the logical address of "charset" is within 32 bytes 
of the object's upper bound, an addressing violation trap 
is raised. This instruction must be interruptible. 



MOVEADR string, St; 

if IIP = then C := index 

else P0P4 C; 

IIP := 0; 

CC := CCL; 

Notyetdone := C <= limit; 

while Notyetdone do begin 

Char := (St + C ) [0..7]; {zero-extend} 
TESTBIT Char, charset; 
if CC = CCG then begin 
Notyetdone := false; 
index := C; 
end 

else begin 
C := C + 1; 

Notyetdone := C <= limit; 
{ if implementation chooses to acknowledge 
an external interrupt here, then 
PUSH4 C; set IIP := 1; Notyetdone := false; 
} 



end; 
end; 



Status: CC 

Traps: AddressingV 
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6.2.8.4 PDDEL ppn.r4 

Delete from PDIR. The Physical Page Descriptor PPD for the 
physical page with physical page number "ppn" is 
removed from its hash chain. 
Ring privilege is required. 



02/08 



ppn 



12? 
ppn + 4) [07751]; 
hash( VPN ); 



Searchpa := PDIR. PA + 16 * 
VPN := (PDIR. PA + 16 * 
Linkpa := HASH. PA + 4 
repeat 

Oldlinkpa := Linkpa; 

if (Linkpa) [0.. 31] = then Trap" ADRPDIR"; 

Linkpa := (Linkpa) [0. .31] + 12; 

until Linkpa = Searchpa; 
(Oldlinkpa) [0.. 31] := (Searchpa) [0. .31] ; 

Notes: (consult carefully when implementing a VISION machine 
capable of running as a shared-memory multi-processor) 

1) Address translation aids (TLB) must be synchronized (by 
hardware) with the state of the PDIR/HASH before hardware 
may execute the instruction following PDDEL. 

2) In a shared-memory multi-processor system, implementations 
must guarantee that read-write operands never fault on the 
write. The burden for ensuring this can be placed entirely 
on the implementation of PDDEL. This requires PDDEL to 
complete a handshake with all processors in the system 
before the instruction following PDDEL executes. 

3) Various functions compete for access to hash bucket and PPDs 
and these functions must be carefully synchronized by 
hardware. These functions are: address translation; writing 
dirty/reference bits; PDINS; TESTREF; PDDEL. 

Each hash bucket and each PPD has a bit for semaphore use by 
hardware. It is sufficient to lock the appropriate hash 
bucket for the entire duration of each function. However, 
doing so might add overhead to writing dirty/reference bits. 
The following scheme is also sufficient: when writing dirty/ 
reference bits lock only the PPD; when translating addresses 
lock hash bucket and each PPD in the chain and unlock each 
immediately after reading its contents; PDINS locks the hash 
bucket; PDDEL locks two consecutive links in the chain 
(starting with the hash bucket) and unlocks the first one 
only after it has obtained the lock for the third one. 
Hardware must unlock all semaphores when a trap occurs. 

Traps: ADRPDIR 
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6.2.6.10 CHECKA parameter. r4 

Conditional break. If the "CBA" enable bit is set, a trap is 
taken. The value of "parameter" is passed to the trap 
handler. It is permissible for hardware to not trap on 
an illegal operand if CBA is clear. 



if STATUSB.CBA = 1 then Trap"DBCHECKA"; 
Traps: DBCHECKA 

6.2.6.11 CHECKB parameter. r4 

Conditonal break. If the "CBB" enable bit is set, a trap is 

taken. The value of "parameter" is passed to the trap 
handler. It is permissible for hardware to not trap on 
an illegal operand if CBB is clear. 

if STATUSB.CBB = 1 then Trap" DBCHECKB" ; 
Traps: DBCHECKB 

6.2.6.12 CHECKLO source. r4, lobound.r4 

Check lower bound. If "source" is less than "lobound", a 

bounds check trap occurs. The comparison is a two's 
complement 32-bit compare. 

if source < lobound then Trap"INSCHKLO"; 
Traps: INSCHKL0 

6.2.6.13 CHECKHI source. r4, hibound.r4 

Check upper bound. If "source" is greater than "hibound", a 
bounds check trap occurs. The comparison is a two's 
complement 32-bit compare. 



if source > hibound then Trap"INSCHKHI"; 
Traps: INSCHKHI 
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4.7 Task Control Block 



Hardware needs a certain amount of information in order to 
execute the current task. This information is stored in the 
Task Control Block (TCB) , located by a register TCB.VA. 
This TCB.VA register can be thought of as an extension of 
STATUSC. TCB.VA must be a multiple of 16. The length of the 
TCB is 176 bytes. Also, the TCB must be memory resident. 

A 64-bit register TCB. LA accompanies TCB.VA; operating system 
software is responsible for ensuring that the logical address 
TCB. LA does in fact translate into the virtual address TCB.VA. 
Moreover, the logical address TCB. LA must have a zero group 
selector. Hardware implementations are free to use either 
TCB. LA or TCB.VA to locate the TCB. 

A task switch is accomplished by Dispatcher software through 
simultaneously changing the TCB.VA and TCB. LA registers. 



/TCB. LA 
\TCB.VA ==> 

+4 



+ 12 

+ 16 
+20 
+24 
+28 

+32 



+ 108 



12 3 31 

XM|SUIP|RSUIP| reserved 

+ — + + + 

for hardware 

+ 

reserved for system 
software 



+ 



GDI — group descriptor 
for group 1 

+ 



+ 



+ 112 | 




+ 116 | 


GD7 — group descriptor 


+ 120 | 


for group 7 


+ 124 | 




+ 128 | 




+ 132 | 


Task Breakrange 


+ 136 | 


Descriptor 


+ 140 | 





+ 144 | 
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I I 

+ + \ 

TCB.VA +144 | SC - HP3000 mode | | 

+148 I Stack Pointer j I 

+ + > HP3000 mode 

+152 | CSTX | | information 

+156 | descriptor | I 

+ + / 

+160 | SN - Vision mode I \ 

+164 | Stack Pointer I I 

+ + | 

+168 | logobjid of VCSA I > Vision mode 

+ + | information 

+172 | TRYOFFSET | | 

+ + / 

+176 | | 



XM — execution mode of the task. On IEXIT to this task, 
execution mode STATUSA.XM is set to this value. 

SUIP — switch in progress. Used by IEXIT. 

RSUIP — return switch in progress. Used by IEXIT. 

GDi — Group Descriptors. The format of a Group Descriptor is 
described in section 4.5. 

Task Breakrange Descriptor. * 

This descriptor is described in section 4.9. 

SC — Logical address of top-of-stack of the HP3000 mode 
stack used to initialize S on IEXIT. 

CSTX Descriptor. 

The descriptor locates the CSTX used in HP3000 mode. 
Its format is the same as described in section 4.10. 

SN — Logical address of top-of-stack of the Vision mode 
stack used to initialize S on IEXIT. 

logobjid of VCSA. 

The logical object id of the logical object in use as 
the Vector Context Save Area. See section 4.11. 

TRYOFFSET. 

The stack offset saved by the TRY instruction. 
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6.2.9.8 IEXIT 


IEXIT: if STATUSC.ICS = then Trap"INSPRIV"; 




if Q = QI and not(todispatch) then begin 


Interrupt Exit. This is used at completion of an interrupt 


case 1: {return to task} 


handler (either external or internal). A trap occurs 


STATUSC.ICS := 0; XM : = TCB.XM; 


if the instruction is executed other than on the ICS. 


if XM = then begin 


Q must either point to the dispatcher marker, a switch 


{return to Vision mode} 


marker or an interrupt marker, otherwise results are 


S := TCB.SN[0..63]; 


unpredictable. If any of the pages of the ICS are 


if TCB.SUIP = then RESTORE_RETURN( false) 


absent, results are unpredictable. If IEXIT returns 


else begin 


control to a task, the TCB of that task must be resident. 


TCB.SUIP := 0; 


If any pages on the task's stack containing the interrupt 


BRX switch handler; {object 13} 


marker are absent, or if that stack is in a^stack^pverflow 


end 


condition, the appropriate trap is taken which runs as the 


else begin 


bottom routine on the ICS (at QI). Neither TCB nor the 


{return to HP3000 mode} 


task stack object are modified in any way. There are 3 


S := TCB.SC[0..63]; 


cases of IEXIT which are sorted as follows: 


RESTORE HP3000; \ don't allow 




if TCB.SUIP = then "EXIT 0' / interrupts 


Case 1: IEXIT should return control to a task without 


else P := "SUITCHC" trap label; 


involving the dispatcher. 


TCB.SUIP := 0; 


This case obtains if Q=QI , while DRF=0 or dispatching 


end 


is otherwise disabled. 


end 




else if Q=QI or (todispatch and (Q)[4]=l) then begin 


Case 2: IEXIT should run the dispatcher to have it select 


case 2: {start dispatcher} 


a task to LAUNCH. 


Q := QI; DRF := 0; 


This case obtains if DRF=1 (dispatcher request flag), 


STATUSB := DispatcherStatusBInit; 


dispatching is not disabled, and no interrupt handler 


EXIT <<but leave S at Q>> {Q doesn't change} 


is pending. Note that it is possible for the dispatcher 


end 


to preempt itself. 


else 




case 3: {resume code running before interrupted} 


Case 3: IEXIT should resume whatever code was running prior 


S := Q + 120; 


to the interrupt handler. This may be a lower priority 


RESTORE_RETURN ( true ) ; 


interrupt handler that was left pending, or the dispatcher. 




The IEXIT description uses these uninterruptible sequences: 


Note 1: implementations may substitute for the test Q = QI the 




test (Q-4)[0..31] = QI[32..63]. 


RESTORE RETURN (Br egs): begin 


Note 2: "todispatch" summarizes the condition that dispatching 


if (TCB.RSUIP = 0) or Bregs then begin 


is both desired (DRF=1) and possible (DDC=0, IE=1). 


BP0P8 B5; .. BP0P8 BO; 




P0P4 X15; .. P0P4 X0; 




end; 


Status: restored from marker 


P0P8 STATUSB; TCB.RSUIP := 0; 


Traps: INSPRIV 


Q := S; EXIT; 


STKUNF 


end 


STKCONSISTV 




SUITCHC 


RESTORE HP3000: begin *P0P2' DelQ; Q := S - DelQ; 


Address ingV on all base register loads 


"P0P8' STATUSB; S P0P2' Z. OFFSET; 




"P0P2' DL. OFFSET; X P0P2' DB. OFFSET; 




'P0P2' DB.DST; 




end 
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10.5.2.3 SWITCH 



The SUITCH instruction provides a switch of the execution 
environment of a process from Native mode directly to 
Compatibility mode. The Native mode stack is capped with a 
Switch Stack Marker, the appropriate mode flags changed, and 
control passed to the Compatibility SUITCH trap routine on the 
Compatibility mode stack which executes above the previous 
interrupt stack marker. Any interference, such as Page Faults, 
aborts the operation after setting the "switch in progress' 
flag which then takes effect on the subsequent I EXIT to the 
process. 

This instruction requires Ring level 1. 

if STATUSC.ICS = 1 or STATUSB.IE = 

then Trap"INSSUITCH" 

else 

begin 

PUSH_EXTERNAL_PROCEDURE_MARKER; \ 



PUSH8 STATUSB; 

TCB.SN := S; 

TCB.XM := 1; 

TCB.SUIP := 1; 

execute_case_l_of_IEXIT; 

end; 



/ Switch Marker 
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10.5.2.4 RSUITCH 



The RSUITCH is the reverse operation to a corresponding SUT 
instruction which occured from Compatibility mode and basically 
returns execution control back onto the Compatibility mode stack 
environment. The Native mode stack is flushed to leave the old 
switch stack marker, the process mode flag set to Compatibility 
mode, and a relaunch of the Compatibility mode process occurs. 

This instruction requires Ring level 1. 

if STATUSC.ICS = 1 or STATUSB.IE = 

then Trap"INSSUITCH" 

else 

begin 

S := Q+8; 

TCB.SN := S; 

TCB.XM := 1; 

TCB.RSUIP := 1; 

execute_case_l_of _I EXIT ; 

end; 
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6.2.7 Interaction with Machine State 



6.2.7.1 M0VEfSP4 selector. rl, destination. w4 

Move from special register. This selects a certain register 
or dedicated memory location based on the value of 
"selector". This register or memory location is then 
right justified, zero filled and stored in the 32-bit 
"destination". An INSMOVSPL violation occurs when 
either the value of the selector does not correspond 
to any entry in the following list or when the current 
execute level does not match the level required for 
reading the selected register. 



selector 



frbits req'd XL Assembler alias 



condition code 


2 


3 


GetCC 


1 rounding mode 


2 


3 


GetRM 


2 exit threshold 


2 


3 


GetXTL 


3 execute level 


2 


3 


GetXL 


4 flpt trap enable 


5 


3 


GetTEFLP 


5 int trap enable 


2 


3 


GetTEINT 


6 dec trap enable 


2 


3 


GetTEDEC 


7 flpt mode 


2 


3 


GetFPCMODE 


8 STATUSA 


32 


3 


GetSTATA 


9 STATUSB1 


32 


3 


GetSTATBl 


10 STATUSB2 


32 


3 


GetSTATB2 


11 TRYoffset 


32 


3 


GetTRY 


12 task clock enable 


1 


1 


GetTCE 


13 STATUSC 


32 


1 


GetSTATC 


14 Interrupt Mask 


16 


1 


GetlMR 


15 STATUSD 


32 


1 


GetSTATD 


16 HASH. PA 


32 


1 




17 HASH. LENGTH 


32 


1 




18 PDIR.PA 


32 


• 1 




19 PDIR. LENGTH 


32 


1 





Traps: INSMOVSPL 
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6.2.7.2 M0VEtSP4 selector. rl, source. r4 

Move to special register. This instruction selects a special 
hardware register or dedicated memory location 
based on the value of "selector". The value of 
"source" is stored into this register or location. 
The least significant bits of "source" are used in 
the assignment, without any overflow indication. 
A trap is taken when the selector does not match 
any of the entries in the following table or if 
the current ring level does not match the required 
ring level. 



selector 



#bits req'd XL Assembler Alias 



condition code 

1 rounding mode 

2 exit threshold 

3 flpt trap enable 

4 int trap enable 

5 dec trap enable 

6 flpt mode 

7 STATUSB2 

8 Q_offset 

9 task breakrange LOI 

10 cond break A 

11 cond break B 

12 task clock enable 

13 Interrupt mask 

14 Debug ring level 

15 sys breakrange LOI 



2 


3 


SetCC 


2 


3 


SetRM 


2 


< source 


SetXTL 


5 


3 


SetTEFLP 


2 


3 


SetTEINT 


2 


3 


SetTEDEC 


3 


3 


SetFPCMODE 


32 


3 


SetSTATB2 


32 


3 


SetQ 


32 


3 


SetTBR 


1 


3 


SetCBA 


1 


3 


SetCBB 


1 





SetTCE 


16 





SetlMR 


2 





SetDRL 


32 





SetSBR 



Status: depends on selector 
Traps: depends on selector 

SELECT0RV 

INSPRIV 

STKC0NSISTV (if setting Q offset to value 
outside SB and S) 
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6.2.7.3 M0VEfSP8 selector. rl, destinaiton.w8 


6.2.8 Instructions that interact with the address space 


Move from special register. This instruction is used to 




obtain the contents of a special hardware register 




or dedicated memory location identified by the 


6.2.8.1 PROBE ring_access.rl, address. m, length. r4, s_upper.r4 


value of "selector". Values of "selector" not 




represented in the following list cause the trap 


Probe access rights. This instruction sets condition codes 


"SELECTORV" to be raised. 


dependent on the legality of accessing the address 




range given by "address" and "length". PROBE tests 




whether in the ring level specified by "ring" the type 


selector #bits req'd XL Assembler Alias 


of access represented by "access" would be legal . 




everywhere in the logical address range starting at 


program counter 64 3 GetP 


"address" and ending at "address"+"length"-l. 


1 ODT0.LA 64 1 


A negative "length" is considered illegal; a zero 


2 TCB.LA 64 1 GetTCB 


length represents the case where the address range will 


3 interval timer 64 1 


not be used, yet the address may have to be loaded into 


4 task clock 1 64 1 


a base register. 


5 time of century 64 1 


If the object is the stack object, then the ending 


6 QI.LA 64 1 


address is compared against "sjjpper" instead of the 


7 DST descriptor 64 1 


present value of S or SL. 


8 CST descriptor 64 1 


PROBE requires ring 1 privilege. 




ring := ring_access[0. .3]; 


Traps: SELECTORV 


access := ring access [4. .7]; 


INSPRIV 






Encodings: ring access 




instruction_fetch 


6.2.7.4 M0VEtSP8 selector. rl, source. r8 


1 1 memory_read 




2 2 memory write 


Move to special register. This instruction stores the 


3 3 


value of "source" into the special hardware 


4 caller's 


register or dedicated memory location identified 




by "selector". 


Values not in this list will cause a SELECTORV trap. 




The resulting conditon code settings are as follows: 


selector #bits req'd XL Assembler Alias 


CCL: the object does not exist or the indicated 


====================================================== 


access is illegal or the length is negative. 


interval timer 64 




1 task clock 64 


CCE: the indicated access is legal but the indicated 


2 time of century 64 


address range is not wholly within the object. 


3 QI.LA 64 




4 DST descriptor 64 


CCG: the indicated access is legal at the indicated 


5 CST descriptor 64 


privilege level over the entire address range 




specified; or: the object exists, the access is 




legal and the length is zero. 


Traps: dependent on selector 




SELECTORV 


Status: CC 


INSPRIV 


Traps: INSPRIV 




SELECTORV 
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6.2.8.2 BPROBE ring_access.rl, address. b, length. r4, s_upper.r4 

Probe access rights. This instruction sets condition codes 
dependent on the legality of accessing the address 
range given by "address" and "length". 

This instruction differs from PROBE only in that the 
address is already loaded into a base register. This 
implies that the object is already known to exist. 

BPROBE requires level 1 privilege. 



Status: CC 
Traps: SELECTORV 
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